Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2026-26002

OnDemand susceptible to malicious input when navigating to a directory.

Description

Open OnDemand is an open-source high-performance computing portal. The Files application in OnDemand versions prior to 4.0.9 and 4.1.3 is susceptible to malicious input when navigating to a directory. This has been patched in versions 4.0.9 and 4.1.3. Versions below this remain susceptible.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OSC ondemand

  • < 4.0.9affected
  • >= 4.1.0, < 4.1.3affected

References